dovecot auth using 100% CPU

Felix Zielcke
Fri, 03 Jul 2015 16:14:49 -0000

Am Freitag, den 03.07.2015, 14:28 +0200 schrieb Steinar
Bang:
> >
> fail2ban scans the logs of various services for attacks and firewalls
> out the attacking IP addresses.
>
> There are no built-in rules for exim or dovecot in the debian
> fail2ban
> package, but there is something here that could possibly be
> adapted...?

Are you talking about wheezy or jessie?
jessie has rules. But they need to be enabled like this:

# cat /etc/fail2ban/jail.d/local.conf
[exim]
enabled = true

[exim-spam]
enabled = true

[dovecot]
enabled = true